Privacy Policy
Last updated: 14 September 2026
Leadr is operated by CashCowLabs LLC, with a mailing address in Sheridan, Wyoming, United States. In this policy, “Leadr”, “we” and “us” refer to CashCowLabs LLC, operating Leadr.
This policy explains how Leadr handles personal information when you visit leadr.so, request a resource, register for a masterclass, buy a digital product, or contact us.
Privacy and support: hello@leadr.so
Mailing address: 30 N Gould St Ste N, Sheridan, WY 82801, US.
Email choices · Cookies and measurement · Your privacy choices · Terms
Information we collect
| Information | Examples and purpose |
|---|---|
| Contact details | Name, email address and, when supplied at checkout or in a form, phone number. We use these to respond to requests, deliver resources and administer bookings. |
| Registration and preferences | Signup source, consent wording/version and timestamp, subscription status, and whether you registered or purchased. These help us honour your choices and send relevant messages. |
| Orders and payments | Product, amount, currency, payment status, transaction references, and contact or billing information returned by the payment provider. These support fulfilment, receipts, refunds and accounting. |
| Website and campaign activity | Page visits, clicks, device/browser information, IP address, referral URLs, UTM parameters, ad/campaign identifiers and browser identifiers. These help us measure campaigns, troubleshoot and protect the service. |
| Email activity | Sending, delivery, bounce, complaint and unsubscribe events, and open/click events when tracking is enabled. Open measurements may be affected by email-provider privacy features. |
| Assessment answers and reports | Career function, experience, salary band, goals and free-text answers you provide to generate a personalised report, together with the resulting report. |
| Correspondence | Messages and information you choose to send to support. Please do not send passwords, card details or sensitive workplace information. |
Our masterclass checkout uses Stripe. Payment credentials are entered in Stripe’s payment interface; our application does not store full card numbers or card security codes. Stripe may process information for its own fraud-prevention and legal purposes under its privacy notice.
How we use information
We use information to provide requested resources and services, manage accounts and event access, process orders, answer questions, handle complaints, prevent abuse, maintain records required by law, and understand website and campaign performance.
Where relevant law requires a legal basis, we rely on consent for consent-based marketing, the steps needed to enter into or perform a purchase contract, legal obligations for required records, and legitimate interests where available and appropriate for security, support and service administration. We do not treat accepting purchase terms as consent to unrelated marketing.
Personalised assessments
If you use the AI Workday Advantage assessment, we process the answers you submit to generate your report and may store the report, including its answers, in Cloudflare storage for later retrieval. When AI generation is enabled, answers are sent through OpenRouter to the configured model provider. When live research is enabled, role and career-related search terms are sent to TinyFish to find supporting sources. Avoid including employer secrets or other people’s personal information in free-text answers, and keep your report access link private.
Email choices
You can view the masterclass page without registering. Before payment, our booking form saves your name, email address and phone number for booking fulfilment, including when checkout is not completed. We pass these details to Stripe to prefill your payment session and send booking notifications to our private Slack channel. Paying for a seat does not by itself enrol you in promotional sequences. Where we display a separate masterclass signup form, marketing permission is requested through an optional, unchecked checkbox. Other newsletter or resource forms explain what you are requesting at the point of signup.
Subscribers who opt in may receive educational tips, nurture sequences, event updates and relevant offers. We distinguish prospective attendees from purchasers so that the messages can reflect their purchase status. We do not buy, rent or scrape email lists for unsolicited campaigns.
Use Unsubscribe in a marketing email to stop the relevant subscription, or Manage preferences to review the available lists. You can also email hello@leadr.so to request removal from all marketing. We do not charge for opting out or require a purchase. We honour requests without undue delay and within any applicable legal deadline.
Unsubscribing from marketing does not cancel a purchase. Necessary messages about a booking, payment, security or a support request may still be sent. If you also want to cancel a booking, see our Refund and Cancellation Policy.
We may keep a limited suppression record after an unsubscribe, bounce or complaint so that an import or later website visit does not accidentally restart marketing. This is different from keeping you on an active mailing list.
Cookies and measurement
We use cookies and browser storage for registration continuity, checkout, security and campaign attribution. Our attribution record can remain in local storage for up to 90 days before the website expires it on a subsequent visit. Some masterclass campaign values use session storage, and purchase-event markers help avoid counting the same purchase twice.
We use PostHog on selected masterclass and resource pages for events and masked session replay. Activity may be linked to the name and email you provide after registration. Replay settings mask form inputs, block payment frames, and exclude request bodies, headers and console logging. These protections reduce exposure; please avoid entering confidential information into general website fields.
We also use Google Tag Manager and Meta for tag delivery, attribution and conversion measurement. Registration and purchase activity may be associated with campaign identifiers. Conversion measurements can include email or phone matching data, including hashed values in our server-side Meta integration. Hashing supports matching and does not make information anonymous.
You can block or clear cookies and site storage through your browser and manage advertising preferences with the relevant provider. Blocking storage may affect checkout or remembered preferences. Email unsubscribe controls apply to email marketing; they do not clear browser storage or disable website analytics. Where consent is legally required for optional tracking, a privacy notice alone does not replace that consent.
Service providers and disclosures
We use providers to operate the service. We disclose information relevant to the work they perform, rather than making our contact list public.
| Provider or system | Role |
|---|---|
| Cloudflare | Website delivery, security, application functions, registration/order database and digital-file storage. |
| Amazon Web Services and self-hosted Notifuse | Hosting, backups, contact records, segmentation, subscription preferences and email orchestration. Amazon SES is used for system email delivery. |
| Postmark, when enabled for the relevant message | Email delivery and delivery-event processing. Used for messages routed through this provider during or after our transition from Amazon SES. |
| Kit | Newsletter and resource signup/email flows that still use Kit while those flows are maintained or migrated. |
| Stripe | Masterclass payment processing, payment events, refunds and fraud prevention. |
| Slack | Internal signup and purchase notifications containing your name, email and phone number when provided. |
| PostHog | Website analytics, identified visitor activity and masked replay on selected pages. |
| OpenRouter and its configured model provider, when enabled | Generate personalised report content from assessment answers. |
| TinyFish, when enabled | Search for sources to support personalised reports. |
| Google and Meta | Tag delivery, ad attribution and conversion measurement. |
Some providers act as independent controllers for parts of their services under their own privacy notices. We may disclose information when required by law, to protect rights and security, or in connection with a business transfer subject to appropriate protections and notice where required.
We do not sell contact lists. Advertising-related disclosures described above may be treated as “sharing” or a “sale” under particular privacy laws. Where those laws apply, contact us to exercise applicable opt-out rights; this policy does not waive them.
International processing
We serve an international audience, including people in India. Our systems and providers may process information in the United States and other countries. Privacy laws can differ between countries. Where required, we use applicable transfer safeguards and contractual protections; we do not promise that all information stays in your home country.
Retention and security
We retain information for the purposes described here: while providing a service, maintaining an active subscription, resolving an issue, keeping necessary suppression records, or meeting applicable accounting, legal and security requirements. Retention depends on the record and purpose; it is not an indefinite right to use your information for marketing.
When information is no longer needed, we delete it or de-identify it where practicable. Backup copies may persist until their normal rotation, and records needed for legal obligations or dispute resolution may be retained separately. Contact us for information about a particular record or an erasure request.
We use measures such as encrypted connections, access controls and backups. No system can guarantee absolute security. We handle and notify affected people or authorities of qualifying incidents as required by applicable law.
Your privacy choices
Depending on the laws that apply to you, you may have rights to request access, correction, deletion or a copy of your information; withdraw consent; object to or restrict certain processing; and raise a complaint with the relevant authority. Some rights have exceptions, such as retaining transaction records required by law. Withdrawing consent does not make earlier lawful processing unlawful.
Send requests to hello@leadr.so, ideally from the address associated with your registration. Tell us what you would like changed. We may request proportionate identity verification before disclosing or changing records. We respond within applicable legal time limits and explain any information we must retain. You may use the same address to raise a privacy concern or ask for it to be escalated.
Children
The masterclass and paid services are intended for adults aged 18 or older. We do not knowingly solicit children’s information for these services. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
Changes
We update the date above when this policy changes and provide additional notice where required for material changes. A policy update does not automatically give us consent for a new use that requires your permission.